diff --git a/cloudtrail/cloudwatch.tf b/cloudtrail/cloudwatch.tf
index 958c126..c3249e7 100644
--- a/cloudtrail/cloudwatch.tf
+++ b/cloudtrail/cloudwatch.tf
@@ -1,5 +1,5 @@
 locals {
-  cloudwatch_prefix        = replace(aws_cloudwatch_log_group.this.arn, "/:\\*$/", "")
+  cloudwatch_prefix        = try(replace(aws_cloudwatch_log_group.this[0].arn, "/:\\*$/", ""), "")
   cloudwatch_suffix        = format("%v_CloudTrail_%v*", local.account_id, local.region)
   org_cloudwatch_suffix    = format("%v_*", var.organization_id)
   cloudwatch_resources     = join(":", [local.cloudwatch_prefix, "log-stream", local.cloudwatch_suffix])